Re: Standard for embedding KeyInfo

2007-04-05 Thread Kelly Graus
By this do you mean embedding the certificate in the signature? If so, this sounds like it would work best for us. Do you have any sample code that does this? I wrap KeyInfo myself now, I don't use this library directly for that part, it's not as powerful as my code. My ol

RE: Standard for embedding KeyInfo

2007-04-05 Thread Scott Cantor
> By this do you mean embedding the certificate in the signature? If so, > this sounds like it would work best for us. Do you have any sample code > that does this? I wrap KeyInfo myself now, I don't use this library directly for that part, it's not as powerful as my code. My old code used it, y

Re: Standard for embedding KeyInfo

2007-04-05 Thread Kelly Graus
I'm working on signing an XML document using a X509 certificate. As part of the signing process, I am appending DSIGKeyInfoX509 information in the signature (by calling appendX509Data on the DSIGSignature object). Once that is there, I am manually adding the name of the certificate,

Re: Standard for embedding KeyInfo

2007-04-04 Thread Arshad Noor
Agree with many of the comments made by Scott. In the architecture of StrongKey (www.strongkey.org), a symmetric key-management software, we've created the concept of a Global Key ID (GKID) to identify every symmetric key used to encrypt something. We chose to use the XML Encryption schema for e

RE: Standard for embedding KeyInfo

2007-04-04 Thread Scott Cantor
> I'm working on signing an XML document using a X509 certificate. As > part of the signing process, I am appending DSIGKeyInfoX509 information > in the signature (by calling appendX509Data on the DSIGSignature > object). Once that is there, I am manually adding the name of the > certificate, and